NVD

Id
42336  
Name
CVE-2012-0199  
Description
Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute arbitrary SQL commands via (1) a SOAP message to the Printer.getPrinterAgentKey function in the SoapServlet servlet, (2) the User.updateUserValue function in the register.do servlet, (3) the User.isExistingUser function in the logon.do servlet, (4) the Asset.getHWKey function in the CallHomeExec servlet, (5) the Asset.getMimeType function in the getAttachment (aka GetAttachmentServlet) servlet, (6) the addAsset.do servlet, or (7) a crafted EG2 file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-03-05  
Modified Date
2012-03-06  
Seq
2012-0199  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213594 42336 CVE-2012-0199 http://www.zerodayinitiative.com/advisories/ZDI-12-040/  View
213595 42336 CVE-2012-0199 tpme-multiple-sql-injection(73034)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25906 JVNDB-2012-001613 IBM Tivoli Provisioning Manager における SQL インジェクションの脆弱性 IBM Tivoli Provisioning Manager Express for Software Distribution には、SQL インジェクションの脆弱性が存在します。 CVE-2012-0199 53437 CVE-2012-0199 42336 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001613.html 2012-03-06 2012-03-07 View